I run a site on Buddypress, and I daily make google searches on it to see if people have posted blogs or news about it.

There is a very curious thing that I’ve been seeing that I wanted to share with you.

Another forum post that I started here looks suspicious to me, please see this screenshot from google,

http://u.kodingen.com/vaE82

and you can re-create it by searching ‘kodingen’ on google. It reads as following;

nig3d posted a reply on the forum topic Kodingen.com install any …

Jan 28, 2010

nig3d posted a reply on the forum topic Kodingen.com install any web app in 2 minutes from your browser, and code online: Man, this is powerful stuff! You opened my mind! Great work.

http://buddypress.org/?q=https://www.paypal.com/it/mrb/pal=2PWG9NN67LYT6?EARNMONEYPAYPAL

Does anyone know how that earn money paypal bs got in there ? Any idea how to remove that thing from that post ? It doesn’t look like it is doing something though, it looks wrong.

[@apeatling Keymaster 15 years, 8 months ago]

Using 1.2.1? If not then this is the problem.

[@devrim Participant 15 years, 8 months ago]

Thanks Andy, but this link is on Buddypress.org,

https://buddypress.org/forums/topic/kodingencom-install-any-web-app-in-2-minutes-from-your-browser-and-code-online

[@apeatling Keymaster 15 years, 8 months ago]

I don’t think this is something to worry about. It’s not a security problem as far as I can tell. You can do this with any website, it’s simply just adding an extra GET param to a URL.

[@devrim Participant 15 years, 8 months ago]

I think it is bad. See I found out that they are actually making Google believe,

http://u.kodingen.com/vLZ4B

This makes our site look like we are affiliated, or we are phishing web site if nothing, it’s bad.

Could that post be removed or that comment deleted ?

google search: http://bit.ly/9ALjBc